4 matches found
CVE-2025-36274
IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user...
Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway
Summary Multiple vulnerabilities were addressed in IBM Aspera HTTP Gateway version 2.3.2. Vulnerability Details CVEID:CVE-2025-36274 DESCRIPTION: IBM Aspera HTTP Gateway stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user. CWE:CWE-312...
CVE-2025-36274 IBM Aspera HTTP Gateway information disclosure
IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user...
IBM Aspera HTTP Gateway 安全漏洞
IBM Aspera HTTP Gateway is a large file transfer component from International Business Machines IBM. A security vulnerability exists in IBM Aspera HTTP Gateway version 2.3.1 and prior versions that originates from storing sensitive information in plaintext, which could be read by unauthenticated...